Palo Alto Networks Next-Generation CASB
Palo Alto Networks Next-Generation CASB: A broad CASB for SaaS discovery, data protection, posture management and threat prevention. Ranked #4 of 25 in Cloud Access Security Broker Software by our editors (9.1/10); pricing: Pricing on request; best for security teams wanting CASB plus threat prevention.
At a glance
- Editor score9.1 / 10
- PricingPricing on request
- Best forSecurity teams wanting CASB plus threat prevention
- Deployment modelHybrid
- Founded2005 · Santa Clara, California, USA
- Facts checked20 Sep 2026

Where it wins
- Combines inline and API CASB with DLP and posture management
- Covers discovery, misconfiguration remediation and malware analysis
- Integrates with Microsoft 365, Salesforce, Slack, Box and more
Where it doesn't
- Pricing requires a contact-sales process
- Management is centered on Strata Cloud Manager or Panorama
- Its broad control set may exceed narrow CASB requirements
Our verdict on Palo Alto Networks Next-Generation CASB
Palo Alto Networks Next-Generation CASB is a hybrid cloud access security broker for organizations protecting sanctioned and unsanctioned SaaS applications. It supports web and API controls, combining SaaS application discovery, shadow IT visibility, inline policy enforcement and API-based scanning of cloud assets. Security teams can also apply data loss prevention, SaaS security posture management, misconfiguration detection and remediation, inline malware prevention, WildFire analysis, and user and entity behavior analytics. It is designed for hybrid workforces using Prisma Access and Palo Alto Networks next-generation firewalls.
Its main strength is breadth across the SaaS security lifecycle. The service connects with Airtable, Amazon S3, Box, Dropbox, GitHub, Google Drive, Microsoft 365, Salesforce, ServiceNow, Slack, Workday and Zoom. This supports visibility and controls across common business, storage, development and collaboration applications. Centralized management through Strata Cloud Manager or Panorama gives teams a defined administrative path, while the combination of inline and API-based controls supports both active traffic and cloud application assets.
The pricing model is contact sales, so organizations should plan for a sales-led evaluation rather than a self-serve purchase. Palo Alto Networks Next-Generation CASB is a strong fit for security teams that want CASB alongside threat prevention, DLP, posture management and behavior analytics. Teams seeking only a focused SaaS discovery or policy tool may find its wider control set unnecessary. Its fit is strongest where Palo Alto Networks management and security technologies already align with the organization’s hybrid deployment model.
Your product? Our editors can test Palo Alto Networks Next-Generation CASB in depth and publish a review, labelled as paid · from $149/mo →
Palo Alto Networks Next-Generation CASB pricing
Palo Alto Networks Next-Generation CASB fact sheet
| Free plan | Not verified |
|---|---|
| Paid from | Not verified |
| Deployment model | Hybrid |
| Inline controls | Yes |
| API-based controls | Yes |
| DLP controls | Yes |
| Shadow IT discovery | Yes |
| Threat detection | Yes |
| App connectors | Not verified |
| Deployment | Cloud |
| Platforms | Web |
| Compliance & security | SOC 2, ISO 27001, GDPR, HIPAA, PCI DSS |
| Support | Phone, Tickets, Community, Docs |
| Built for | Mid-market, Enterprise (editorial estimate) |
| Integrations | 12 integrations: Airtable, Amazon S3, Box, Dropbox, GitHub, Google Drive … See all → |
| Pricing | Pricing on request |
| Website | paloaltonetworks.com |
| Facts checked | 20 Sep 2026 |
Palo Alto Networks Next-Generation CASB integrations
Palo Alto Networks Next-Generation CASB lists 12 integrations on its own site.
- Airtable
- Amazon S3
- Box
- Dropbox
- GitHub
- Google Drive
- Microsoft 365
- Salesforce
- ServiceNow
- Slack
- Workday
- Zoom
See all Palo Alto Networks Next-Generation CASB integrations →
Alternatives to Palo Alto Networks Next-Generation CASB
- Check Point SASE CASBA broad hybrid CASB for enterprises that need deep SaaS control and remediation.9.4
- Forcepoint ONE CASBA flexible hybrid CASB combining proxy controls, API scanning, DLP and remediation.9.3
- Netskope One CASBBroad CASB coverage for enterprises managing cloud apps, data, threats, and AI use.9.2
See all Palo Alto Networks Next-Generation CASB alternatives →
Palo Alto Networks Next-Generation CASB vs the competition
- Palo Alto Networks Next-Generation CASB vs Check Point SASE CASB
- Palo Alto Networks Next-Generation CASB vs Forcepoint ONE CASB
- Palo Alto Networks Next-Generation CASB vs Netskope One CASB
- Palo Alto Networks Next-Generation CASB vs Cato CASB
- Palo Alto Networks Next-Generation CASB vs Zscaler CASB
- Palo Alto Networks Next-Generation CASB vs Proofpoint Cloud App Security Broker
Compare Palo Alto Networks Next-Generation CASB with any tool side by side →
Used Palo Alto Networks Next-Generation CASB? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Palo Alto Networks Next-Generation CASB for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
Palo Alto Networks Next-Generation CASB is listed in our Cloud Access Security Broker Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/palo-alto-networks-next-generation-casb/"><img src="https://www.itechguides.com/best/badge/palo-alto-networks-next-generation-casb.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update





